Misbehaviour NetworkSpoofing

URI: NetworkSpoofing

Description: The connection from a device to a subnet is really with a spoofed subnet. This means a malicious party is routing between the device and the subnet with which it is supposed to be connected.

This misbehaviour affects the trustworthiness attribute NetworkAuthenticity

Interface

The interface between a Host and a Logical Subnet. Represents a possible point of control and a target for attack. If the Logical Subnet is an IP network, the Interface also represents the existence of an IP address.

I.Auth.HBImSG.6

Spoofing a device RemoteHost in a Bluetooth pair with device Host in Space: an attacker with access to a location where Host is paired with RemoteHost can spoof the latter to the former. This threat captures the case where SSP is used with a one-sided user confirmation. In principle this can still be spoofed, but it would have to be done where the pair is established, which can be the most secure location they are used (not necessarily in Space where the attacker is present).

I.Auth.HBISG.3

Spoofing a device RemoteHost in a Bluetooth pair with device Host in Space: an attacker with access to a location where Host is paired with RemoteHost, they can physically spoof the connection. This threat covers the case where the connection is freshly established in each location where it is needed.

I.Auth.HUISG.3

Spoofing a device RemoteHost in a USB pair with device Host in location Space: an attacker with access to the location Space of Host can connect a fake version of device RemoteHost to Host.

I.Auth.HRSGSoS.3

Spoofing radio network LogicalSubnet at location Space of access point Gateway: at attacker with access to the location Space of radio networking device Gateway can physically spoof network LogicalSubnet by introducing their own radio network to impersonate the real one.

I.Auth.HSRSoGS.3

Spoofing radio network LogicalSubnet at location Space of supplicant Host: at attacker with access to the location Space of Host can physically spoof network LogicalSubnet by introducing their own radio base station to impersonate the real one.

I.Auth.HSWSoGS.3

Spoofing wired network LogicalSubnet at location Space of supplicant Host: at attacker with access to the location Space of a host Host can physically insert their own device between the host and its wired connection to LogicalSubnet.

I.Auth.HWSGSoS.3

Spoofing wired network LogicalSubnet at location Space of router Gateway: at attacker with access to the location Space of a wired router Gateway can physically insert their own device between the router and its wired connection to device Host.

I.Auth.HVSICSG.3

Spoofing virtual network LogicalSubnet to supplicant Host: at attacker who is able to impersonate the service Service mediating access to LogicalSubnet can induce a supplicant device Host to connect to the wrong virtual subnet.

(empty)

CC.AuS.CRoSI.3

Spoofing network ToSubnet allows diversion of the connection of client Client to service Service to an imposter service: an attacker that has spoofed the network connection from Gateway to ToSubnet can divert messages from Client to Service so they go to a fake version of the service under their control.

SC.C.ImSCf.3

Snooping client-service communications by spoofing subnet LogicalSubnet to Host: if an attacker can spoof physical network LogicalSubnet to Host, they can intercept client-service communications sent via LogicalSubnet from Host.

HC.C.ImHCf.3

Snooping virtual subnet communications by spoofing subnet LogicalSubnet to Host: if an attacker can spoof physical network LogicalSubnet to Host, they can intercept virtual communications sent via LogicalSubnet from Host.